Privacy Policy

Last updated: January 2026

Our Commitment to Your Privacy

Chrysnest is built with privacy and safety as core principles. We understand that our users may be in sensitive situations, and we take every measure to protect your information.

Information We Collect

Account Information

  • Email address (for account creation and recovery)
  • Display name (pseudonym - your real name is never required)
  • Province and city (for roommate matching)
  • Housing preferences (budget, move-in date, etc.)

What We Do NOT Collect

  • Real names (display names only)
  • Photos of you (we use private avatars)
  • Location data or GPS tracking
  • Contacts or phone data
  • Browsing history outside the app

How We Protect Your Data

Encryption

All messages between users are protected with end-to-end encryption using industry-standard Curve25519 and AES-256-GCM encryption. This means only you and your match can read your messages - not even Chrysnest can access them.

Secure Storage

Your data is stored securely using Supabase with Row Level Security (RLS) policies. Your account is protected by a required PIN and optional biometric authentication.

Discreet Notifications

Push notifications never reveal the app name or message content. You will only see generic messages like "You have a new message."

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We only share information:

  • With other users as part of the matching feature (only information you choose to share)
  • With service providers who help us operate the app (under strict confidentiality agreements)
  • When required by law or to protect safety

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data
  • Block and report other users

Account Deletion

You can request account deletion at any time from within the app settings. In accordance with Apple App Store guidelines, deleted accounts have a 30-day recovery period, after which all your data is permanently removed from our servers.

Children's Privacy

Chrysnest is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18 years of age.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: narissara@onalyst.org